$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa File: d5daf9f5-1db5-37fb-be60-626d8a02b645.roa (raw, json) Hash identifier: gOihAiCQvQ4Q+B7HGxcqYRGSw2+mIYPs1uNSocQALP8= Subject key identifier: CB:49:DD:C0:41:E2:9D:32:22:AD:84:D5:88:E8:DD:37:3F:C2:A9:F3 Certificate issuer: /CN=d169cca5-b6c2-41f4-a92f-e74d5713d2c1 Certificate serial: 010D0C9F4328584EA78898B26AA498AF52FF4A40 Authority key identifier: BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 395660 IP address blocks: 2620:133:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:98:b2:6a:a4:98:af:52:ff:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d169cca5-b6c2-41f4-a92f-e74d5713d2c1 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=260dec25-a0f2-4674-a691-c761f7613543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a6:ea:5f:e8:74:ad:ed:80:34:d4:5b:15:22: 42:1f:d4:5c:f3:6a:8c:8c:96:c6:55:8b:2a:c4:60: 23:8d:cd:63:08:90:0c:63:c7:be:91:27:95:7d:0d: 29:b3:de:d8:c7:72:bd:c9:0c:b5:54:e7:92:94:3f: 5e:1f:75:ca:d3:be:70:1d:7d:06:68:f1:29:0a:7f: 95:e1:da:9d:eb:1d:95:ba:76:79:1e:b1:a6:27:c8: 6f:b3:6b:eb:c4:29:58:2b:c6:75:fa:63:2a:3d:75: ef:ac:45:45:d6:99:e9:86:61:6d:af:48:10:9c:af: 3d:6e:77:9c:3a:a7:19:d2:0d:e1:5f:7e:7b:0b:0d: 80:3c:0d:07:c6:62:6d:f8:b9:35:39:43:47:75:41: 91:82:c8:6d:2d:bf:0d:28:97:98:84:ff:21:3b:57: 7d:84:2a:39:a6:d7:a5:c3:ee:24:5f:3d:46:00:dd: 9c:00:31:2b:59:00:0e:0d:d5:96:20:8f:fb:f2:e9: fd:a8:59:30:23:74:fc:02:0f:b7:fd:1b:52:69:28: d0:10:f4:4c:57:31:75:ff:46:75:e5:28:97:df:24: d3:8b:9a:ee:eb:21:9b:d3:05:f3:84:d5:86:ec:68: f1:39:fc:76:30:0d:0a:08:e0:21:50:8d:29:14:b2: 7b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:49:DD:C0:41:E2:9D:32:22:AD:84:D5:88:E8:DD:37:3F:C2:A9:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.crl X509v3 Authority Key Identifier: keyid:BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer sbgp-ipAddrBlock: critical IPv6: 2620:133:b000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:47:5b:ea:1c:70:71:b4:61:c9:6f:d9:09:d8:0d:7d:74:5f: d3:dc:13:e7:13:ea:82:25:e3:56:d7:ea:4d:fb:c2:f5:99:9a: 00:4f:5e:ca:70:9b:8e:0b:08:42:42:a7:67:b5:96:7c:60:a9: b3:30:8a:8e:88:59:c1:5f:fe:a0:4d:92:30:13:d9:e5:13:08: 26:af:97:e0:21:7d:cf:3c:dd:30:69:5e:0f:9c:df:ca:e2:5e: 97:5d:54:c3:a7:7a:7c:48:a8:2c:0b:87:e1:d5:38:31:44:4a: 97:1d:17:f7:f9:58:e4:ba:6b:08:ef:18:60:aa:6e:5f:b9:9f: 1f:93:f4:18:50:79:99:34:f8:7d:2d:2a:cc:7f:d3:29:e3:8b: 1c:bf:ca:96:a8:08:d6:6d:fb:a8:87:1a:3e:e6:7e:17:b6:06: b2:cd:0b:71:9f:60:ec:0f:f4:2f:47:77:63:4d:df:dc:06:df: ce:da:9c:47:00:86:96:a1:40:25:df:f2:d4:d8:99:07:92:d0: 37:e2:16:48:78:40:84:86:80:8f:07:d8:33:05:14:72:67:63: 75:72:e6:6e:dc:02:80:79:85:b3:5e:9e:0d:08:3f:cc:ca:7a: d9:75:49:2f:83:d3:96:c2:9b:56:be:79:3d:21:fd:ad:b7:32: e3:f7:46:88 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6niJiyaqSYr1L/SkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE2OWNjYTUtYjZjMi00MWY0LWE5MmYtZTc0ZDU3MTNk MmMxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjYwZGVjMjUtYTBmMi00Njc0LWE2OTEtYzc2MWY3NjEzNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKbqX+h0re2ANNRbFSJCH9Rc82qMjJbGVYsq xGAjjc1jCJAMY8e+kSeVfQ0ps97Yx3K9yQy1VOeSlD9eH3XK075wHX0GaPEpCn+V 4dqd6x2VunZ5HrGmJ8hvs2vrxClYK8Z1+mMqPXXvrEVF1pnphmFtr0gQnK89bnec OqcZ0g3hX357Cw2APA0HxmJt+Lk1OUNHdUGRgshtLb8NKJeYhP8hO1d9hCo5ptel w+4kXz1GAN2cADErWQAODdWWII/78un9qFkwI3T8Ag+3/RtSaSjQEPRMVzF1/0Z1 5SiX3yTTi5ru6yGb0wXzhNWG7GjxOfx2MA0KCOAhUI0pFLJ7vQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMtJ3cBB4p0yIq2E1Yjo3Tc/wqnzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMTY5 Y2NhNS1iNmMyLTQxZjQtYTkyZi1lNzRkNTcxM2QyYzEvZDVkYWY5ZjUtMWRiNS0z N2ZiLWJlNjAtNjI2ZDhhMDJiNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDE2OWNjYTUtYjZjMi00MWY0LWE5 MmYtZTc0ZDU3MTNkMmMxL2QxNjljY2E1LWI2YzItNDFmNC1hOTJmLWU3NGQ1NzEz ZDJjMS5jcmwwHwYDVR0jBBgwFoAUvTnNefSLJO+PaY3cP5jNDKuB+JowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMTY5Y2NhNS1iNmMyLTQxZjQtYTkyZi1lNzRk NTcxM2QyYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABM7Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAf0db6hxwcbRhyW/ZCdgNfXRf09wT5xPqgiXjVtfqTfvC9ZmaAE9e ynCbjgsIQkKnZ7WWfGCpszCKjohZwV/+oE2SMBPZ5RMIJq+X4CF9zzzdMGleD5zf yuJel11Uw6d6fEioLAuH4dU4MURKlx0X9/lY5LprCO8YYKpuX7mfH5P0GFB5mTT4 fS0qzH/TKeOLHL/KlqgI1m37qIcaPuZ+F7YGss0LcZ9g7A/0L0d3Y03f3Abfztqc RwCGlqFAJd/y1NiZB5LQN+IWSHhAhIaAjwfYMwUUcmdjdXLmbtwCgHmFs16eDQg/ zMp62XVJL4PTlsKbVr55PSH9rbcy4/dGiA== -----END CERTIFICATE-----Generated at Thu Jul 30 00:30:47 2026 by rpki-client